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I. HVAL PARTY TN INTEREST 

The real party in interest is MAZ Technologies, Inc. 

II. WKT ATED APPg AI.S AND IN TERFERENCES 

There are no Appeals or Interferences which will affect or be affected by the outcome of 
this Appeal. 

HI. STATUS OF T HE CLAIMS 

Claims 59, 68-73. 75, 76. 78, and 79 were rejected and are pending. Claims 47-58. 60- 
67. 74, 77, and 80 were allowed. 

IV. STATUS OF TTiy. AMENDMENTS 

An amendment to the claims dated July 7, 2003 was filed subsequent to the final rejection 
dated May.5, 2003. An amendment to claim 63 incorporated all the limitations of base claims 
60-62 to put it in independent form and to overcome an objection to being dependent upon a 
rejected base claim. The amendment was entered. Claim 80 was a new claim, dependent firom 
claim58, including an additional limitation. The amendment was entered. 

V. STTMMARY OF THE INVENTION 

A method of decrypting an electronic file that is to be opened in an application program 
running in a suitable enviromnent for operating the program (p. 8, lines 6-12) comprising the 
steps of: issuing an open document command to act upon the file (p. U, lines 19-20); 
intercepting the open document command (p. 12, lines 1-2); retrieving a decryption key value (p. 
1 2, lines 1 5-16); selecting an algorithm to use with the file from one of a plurality of algorithms 
(p. 13, lines 12-14); inputting a deciTption key with a key value (p. 9. lines 3-10. p. 12. lines 18- 
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22); validating the decryption key value with the key value associated with a file identifier (p. 14. 
lines 3-13); using the key value and the selected algorithm to decrypt the file to an unencrypted 
file (p. 14. lines 13-15); running a vims scan program on the decrypted file (p. 12. lines 6-8); 
completing the open document command by performing the open documem command upon the 
unencrypted file instead of the file (p. 13, lines 4-6). 

A method of encrypting and decrypting a file with one of a plurality of algorithms (p. 8. 
lines 6-12, p. 13. lines 12-14) comprising the steps of: selecting an algorithm to use with the file 
from the plurality of algorithms (p. 13. line 16 - p. 14. Une 2); selecting an encryption key with a 
key value (p. 11, lines 4-7); generating a file identifier from the encryption key, an algorithm 
identifier associated with the selected algorithm and a data identifier associated with the file (p. 
14. lines 3-5); adding the file identifier to the file (p. 14, lines 5-7); inputting a decryption key 
with a decryption key value (p. 9. lines 3-10. p. 12. lines 18-22); validating the decryption key 
value with the key value associated with the file identifier (p. 14, Unes 3-13); and using the key 
value and the selected algorithm to decrypt the file (p. 14. lines 13-15), wherein the file is located 
in a document or image repository (p. 15, lines 14-16). 

A method of encrypting and decrypting a file with one of a plurality of algorithms (p. 8. 
lines 6-12, p. 13. lines 12-14) comprising the steps of: selecting an algorithm to use with the file 
fromthepluraUtyofalgorithmsCp. 13.1inel6-p. 14. line 2); selecting an encryption key with a 
key value (p. U. lines 4-7); generating a file identifier from the encryption key, an algorithm 
identifier associated with the selected algorithm and a data identifier associated with the file (p. 
14, lines 3-5); adding the file identifier to the file (p. 14, lines 5-7). wherein a portion of the file 
idlitifier is encypted before it is inserted into the file (p. 14, lines 20-24); running a virus scan 
program on the file befor. it is encrypted (p. 10, lines 8-10); using the key value and the selected 
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algorithm to encrypt the file and genemte an encrypted file(p. 1 1, lines 15-17. p. 13, lines 12-14); 
inputting a decryption key with a decryption key value (p. 9, lines 3-10. p. 12. lines 18-22); 
validating the decryption key value with the key value associated with the file identifier (p. 14. 
lines 3-13); using the key value and the algorithm to decrypt the file (p. 14, lines 13-15). 

A method of encrypting and decrypting a file with one of a plurality of algorithms (p. 8. 
lines 6-12, p. 13, Unes 12-14) comprising the steps of: receiving an enaypted file firom a first 
person by a second person in an e-mail message (p. 9, lines 18-22, p. 15, lines 16-19); extracting 
a file identifier from the file (p. 14, lines 3^1 1); inputting a decryption key with a decryption key 
value (p. 9, lines 3-10. p. 12. lines 18-22); validating the decryption key value with a key value 
associated with the file identifier (p. 14. lines 3-13); using the key value and the selected 
algorithm to decrypt the file (p. 14, lines 13-15). 
VI. ISSUES PRESENTED 

The following issues are presented by this Appeal: 

Are claims 68-73. 76. 78 and 79 unpatentable under 35 U.S.C. § 103(a) as 
rendered obvious by Hsu (USP 5,584,023) in view of Brundrett et al. (USP 6.249.866)? 

Are claims 59 and 75 unpatentable under 35 U.S.C. § 103(a) as rendered obvious 
by Hsu (USP 5,584,023) in view of Brundrett et al. (USP 6,249,866) and Finley (USP 
5,815,571)? 
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VU. GROUPING TTIF. CLAIMS 

AppUcants submit that the claims do not stand or fell together. Accordingly, the claims 
are to be grouped as follows: 

Group A Claims 68-73, 79 

Group B Claim 76 and 78 

Group C Claim 59 

Group D Claim 75 

Vni. ARGUMENT 
A. Preface 

It is respectfully requested that the Board of Patent Appeals and Interferences consider the 
inadequacy of the quality of this examination. For a claim rejection under 35 U.S.C § 103(a) to 
be proper, the examiner has the burden of establishing a i^r/ma/^cte case of obviousness. 

The Examiner did not and can not meet the burden of establishing a prima facie case of 
obviousness. The Examiner relied on primary reference Hsu (USP 5,584,023). The Examiner 
merely recited the overall utility of Hsu and did not describe how the steps taught in Hsu relate to 
, the specific steps of the claimed method. Further, when the Examiner set forth rejections based 
on HSU in light of Brundrett (USP 6.249,866) and Finley. (USP 5,815,571), there was no 
explanation of how the individual feamres of Hsu, Brundrett and Finley can either be combined 
or modified to arrive at the entirety of the steps of the claimed methods. The Examiner is correct 
that one or two features such as the utility of encryption and the utility of a virus scan may found 
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in HSU. Bnmdrett «i FbUey. Ho«e«r. toe mere 6« to. . generic uttUty eommcn does no. 
render the claimed tneAods obvious. 

Following eaoh Office action r^ecdon. a detailed response was provided showing why 
each and ovoy tejecdon was imp«^r. He Dcanmer did allow sotne cl«»s. However, 
foUowing each response, the Examiner issued »,other Office action, substantially changing the 
basis for rejection, but never establishing a prima facie case of oMousncss. At best, the 
Examiner was able to show th« the prior art disclose one of the plunJity of steps of the claimed 
methods. However that step was merely a description of the claimed inventions' generic uttUty. 

B. nv<^rview of Hsu 

Hsu is directed to a computti system including a transparent and secure file transfer 
mccharusm. In Hsu's computer system, all encypHon ^ decryption is performed using a single 
algorithm. 

C* Overview nf Brundrett 

Brundrett is directed to a file system which includes transparent file encryption and 
decpdon capabilities. Bnmdr«t teaches that the user can choose among available encrypdon 

algorithms, 

D. Overview of flnley 

Finley is dir«>ted to a computer system with secure data paths and a method of prote«ion. 
Finley-s object Is to prevent hann fern, viruaes, cssentiaUy by quarantining all incoming data 
beforeaUowingthed^atobemovedtoanonnalworlcspace. Finley teaches that, instead of a 
single computer, there should be duce computers: a main computer, a security computer and a 
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« computer. Ftaley «te «, *e seoMV co,npu.er a. a "firewdl." AU ^ ftncaon. are 
implemented ta the security compute, which "mu« .of execute programs. Before a new 
program which has been downloaded from the Interne, can be nm on the mam computer, it is 
first run on the test computer. 



Grono 



A > P. ^Wrinn of Cl^tm. and 79 iT«n^t^ntable over Hsu to view of 



Bnindrett 

The Examiner asserted that all the limitations of the claims in this group are taught by the 
combination of Hsu and Brundrett. Yet. the combination of these references fails to teach or 
suggest all of the limitations recited in the claims in this group. 

The invention of claims 68-73 and 79 recite among other limitations: 
inputting a decryption key with a decryption key value; 

vaUdating the decryption key value with the key value associated 
with the file identifier. 
In fact, these steps are not disclosed, taught or suggested by Hsu or Brundrett. The 
Examiner asserted: 

Hsu does teach or suggest the above along with teaching the 
through the transformation, data values (data identifiers) are 
. created"and are later used to generate the decryption index values 

(decryption key) needed in the validation process (see column 14. 

lines 50-67). 

This does not support the rejection. Hsu's vaUdation process compares a text string that 
resides both in the enode and the in-core inode [See Column 14. lines 50-54]. Hsu's encryption 
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method requires that the user enter a password key. This password key and a random mapping 
seed table are processed through a shuffle function that gen^tes both the encryption table and 
the decryption table [See Column U, line 45 - Column 12, line 29]. The password key is 
encrypted using the encryption table and is then appended to both the file's enode and the in-core 
inode [See Column 12, line 50-53. Column 14, lines 42 - Colmmi 15. line 4 and Column 17. 
lines 4-13]. 

Hsu's vahdation process includes decrypting the enode using the decryption key and then 
comparing the text string located in the "magicjext" field of the decrypted enode to the 
corresponding text string located in the in-core inode [See Column 13, lines 56-65 and Column 
14, lines 53 - Column 15 line 4]. Hsu's validation compares the data in the "magicjext" field 
which is the user enter^ password key. The user entered password key is sot the encryption 
table (encryption key) and is not the decryption table (decryption key). 

Unlike claims 68, 69. 7 1 and 79, Hsu's validation process does not utilize the decryption 
key as an element that is compared to another element. Therefore Hsu failes to teach or suggest 
the limitations recited in claims 68, 69, 71 and 79. 

The Examiner cited nothing in Bnindrett that either on its own or in combination with 
Hsu would teach the steps recited in the claims of this group. Therefore, the claims of tins group 
are not obvious firom Hsu in view of Brundrett. 

For the reasons set fortii in this section, the claims in this group are patentable over the 
combination of Hsu and Brundrett. As such, .he obviousness rejection of the claims in ±is group 
should be overturned. 
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F. ar<mp B: Reiectiop 
BruTidrctt 

The Examiner asserts that all the limitatiom of the claims in this group are taught by the 
combination of Hsu and Brundrett. However, the combination of these references fails to teach 
suggest all of the limitations recited in the claims in this group. 

The invention of claims 76 and 78 recite among other limitations: 

generating a file identifier from the encryption key, an algorithm 
identifier associated with the selected algorithm and a data 
identifier associated with tiie file. 

The Examiner asserted: 

Hsu does teach or suggest appending an enode data structure (file 
identifier) to a regular file after the file has been transformed 
through the use of an encryption table which serves as the 
encryption key. The encryption table (encryption key) is formed 
through a shuffling / index value substitution function appUed to 
the password key and seed table (see column 12, line 25 to column 
12. line 26). Through this process data values (data identifiers) are 
created and are associated aritiimetically to the decryption index 
values of tiie decryption table (see column 12, lines 27-49). The 
contents of the identified enode structare (file identifier) can be 
used in tiie authentication of tiie encrypted data. This file identifier 
has associated data identifiers which are part of tive encryption 
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table (encryption key). 
This does not support the rejection. Hsu's data values are not generated based on the file, 
but are created by the "shuffle function" based m on the user entered "password key" and a 
^•predefined seed table" [See Colunm 1 1, line 45 - Column 12, line 493- Therefore Hsu fails to 
teach or disclose the step of "generating a file identifier from the encryption key, an algorithm 
identifier associated with the selected algorithm and a data identifier associated with the file". 
Hence, Claims 60, 76, and 77 are not obvious fiom Hsa 

Yet, flie Examiner asserted: 

When Brundrett verifies the integrity and source of the encryption 

key, the data structure which holds data identifiers, is compared to 
verify the structure (see column 16, lines 5-16). 

This does not support the rejection. Brundrett is merely validating the session key 
^^ti.n / decrvntion of the FUe Encryption Key which is passed between the EFS driver 
(Figure 46) and the EFS service (Figure 50) [See Column 4, line 54 - Column 5, line 9 and 
Column IS, line 51 - Column 16, line 16]. 

In fact, there are three primary encryption / decryption schemes within Brundrett. One 
encryption / decryption scheme uses the File Encryption Key (FEK) to encrypt / decrypt the 
user's file [See Column 9, line 66 - Column 10 line 1]. The second encryption scheme uses the 
Public Key of the user to encrypt the FUe Encryption Key and the Private Key of the user to 
decrypt the FEK [See Column 10, Unes 10-14]. l^e third encryption scheme is where the EFS 
driver (Figure 46) and EFS service (Figure 50) need to communicate. In the third scheme, a 
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symmetric Session Key (SK) is utUized to encrypt data that is communicated between the EFS 
driver (Figure 46) and the EFS service (Figure 50) [See Cohmm 4, Lines 54^1]. 

Within Brundrett, when a file is initially created and is designated to be saved in a pre- 
desi^ated encrypted director of a non-volatile dis.. the FSCTL.SET.ENCRYPTION 
command is issued in order to turn on the encryption bit for a stream [See Column 16, lines 5-9]. 
The FSCTL,SET_ENCRYPnON command is accompanied by a data.steucture (Figure 8) 

containing: 

A public code so that NTFS 28 can differentiate between the two 
types of FSCTL calls; 

An EFS subcode to more particularly define the operation for the 
EFS driver 46 and/or the EFS service 50; 

EFS data containing the FEK; 
The FEK en cr ypted witW tbe Session Kev: 
Optionally EFS metadata. 
[See Column 16, Lines 9-1 1 and Column 15, line 60 - Column 16, line M 

Except for the public code, the information within the data structure is encrypted with the 
session key. [See Column 16. line 1 - Column 16. line 4]. Within the data structure, '^e FEK 
encrypted with the Session Key" is also encrypted. In simple terms, the FEK is listed in the data 
structure both in raw form and session key encrypted form. Tl.en die data stmcture, as a whole, 
is encrypted with the session key. 
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B, Bnmd«tt. fcr purpose, of vcri^g inte^-y "f ^ ^ ^ 

EFS driver (Figure 46) »d fte EFS service (Figure SO) pas. boA tt-e 
FSCTL_SEr_ENCRYFnON eommand md <he data structure, containiiw the FEK. between 
each other), the dsaiffliayE is decrypted utilizing the ^«ric system key. After the fefe 
sSBfflr. has beeu decrypted, i. contai,- ^ « FEK and a session encrypted FEK, The session 
encrypted FEK is .ho. decrypted utUizing the syn>metric system key. Tie verification step is 
accomplished by comparing the FEK values described in this paragraph. If they match, then dte 
communication bet,v.«. «ie EFS driver (Ftp« 46) and the EFS service (Figure 50) was not 
compromis^i during the session key encryption and decryption process [See Column 16, line 12 
-Column 16, line 16]. 

Nothmg in Brundrett regarding the vaificalion of the session key encryprion and 
decryption of the File Encryprion Key teaches or suggests a method including the step of 
-generating a file identifier from the encrypHon key, an algorithm identifier associated with the 
selected algorithm and a data Identifier associated with the file." Even if a person skUled in the 
art of t,ans,ia«nt encryption and decryption methods combined Hsu and Brundrett. nothing is 
disclosed in either and nothing is taught in either to "generatlel a file identifier from the 
encryption key. an algorithm idottifier associatetf with the selected algorithm «.d a data 
identifier associated Wiethe file." Therefore, the clahns of this group are not obvious tern Hsu 

in view of Brundrett. 

Moreover, combining the t^hing of Hsu (comparing the decrw,ted password key that 
was encrypted in .he enode with the decrypted password key that was encrypted in the m-oore 
inode ti, validate accurate decryption of a file) wfth the teaching of Brundrett (validating tite 
session key decryption of the File Encryption Key when the File Encryption Key has been passed 
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™ong fte EFS driver and tt>e EFS service) iiimEfflS because conOnnoHon or n^m-Uon 
would destroy Brundrett 's intended Junction. 

If Brundrett's validation focused on the user entered password key of Hsu, there would be 
no vaUdating if the passing of the File Encryption Key between the EFS driver and the EFS 
service was compromised. Therefore it would be impioper to combine Brundrett and Hsu. 

For the reasons set forth in this section. Ae claims in this group are patentable over Hsu 
in light of Brundrett. As such, the obviousness rqection of the claims in this group should be 
overturned. 

r. n. r/l».iecrion ^» I3noatrntihln ovor Hsi. In view of Brundrett 

and Finlev 

The Examiner asserts that all the limitations of the claims in this group are taught by the 
combination of Hsu. Brundrett and Finley. However, the combination of these references fails to . 
teach or suggest all of the limitations recited in the claim in this group. 

Claim 59 is allowable for the same reasons as claims 68. 69. 71 and 79. Claim 59 recites 

among other limitations: 

inputting a decryption key with a decryption key value; 

validating the decryption key value with the key value associated 
with the file identifier. 
Since Finley does not teach or suggest the above listed steps and nothing in Finley, when 
used in conjunction with Hsu and Brund^ would teach or suggest the above Usted steps, the 
claim of this group is not obvious from Hsu in view of Brundrett and Finley. 
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For the reasons set forth in this section, the claitn in this group is patentable over the 
combination of Hsu. Bnmdrett and Finley. As such, the obviousness rejection of the claim in 
this group should be overturned. 

n ^ wx. i,. |,^nn nf Clato TTnn.tentable ov.r Hsu in view of Brundrett 

and Finley 

The Examiner asserts that all the limitations of the claim in this group are taught by the 
combination of Hsu, Brundrett and Finley. However, the combination of these references fails to 
teach or suggest all of the limitations recited in the claim in this group. 

Claim 75 is allowable for the same reasons as claim 71. Claim 75 contains each and 
everystepandlimitationofclaim71. Claim 75 recites among other limitations: 

nmning a virus scan program on the file before it is encrypted; 

validating a decryption key value with the key value associated 
with the file identifier; 

using the key value and the algorithm to decrypt the file. 

Since Finley does not teach or suggest the above Usted steps and nothing in Finley. when 
used in conjunction with Hsu and Brundrett would teach or suggest the above Usted steps, the 
claim of this group is not obvious firom Hsu in view of Brundrett and Finley. 

For the reasons set forth in this section, the claim in this group is patentable over the 
combination of Hsu, Brundrett and Finley. As such, the obviousness rejection of the claim in 

this group should be overturned. 



14 

Received froin < +1 805 230 1355 > a! 811 5103 2:44:30 PM [Eastern Daylight fime] 



Application No.: 09/259,991 



• +1-805-230-1355 SOCftL IP LflU GRP 172 P60 AUG 15 '03 10:57 

Attny Dclct No. M000-P02003US 

IX. INFORMATION mSCLQSUP F- STATEMENT 

An information disclosure statement was submitted on July 2, 2003 with the fee set forth 
in37C.F.R. § 1.17(p). The Examiner properly identified Aat a statement required by 37 C.F.R. 
§ 1 .97(e) was required in order to consider the information disclosure statement. The omission 
was in error and was not intentional. The Undersigned has made a bona fide attempt to comply 
with the rules. The Undersigned respectfully request that the information disclosure statement be 
considered. 
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X. rONCLUSIO ^t RELIEF 

In view of the foregoing, it is believed that all claims patentably define the subject 
invention over the prior art of record and arc in condition for allowance. The Undersigned 
request that the Board overturn the rejection of all claims and hold that all of the claims of the 
above referenced application are allowable. 

Respectfully submitted, 
SoCal IP Law Group 

Date: August 15, 2003 




Steven C. Sereboff, Reg. No. 37,035 



Joel f^Landau, Reg. No. 54,732 



SoCal IP Law Group 
3 1 0 N. Westlake Blvd., Suite 1 20 
WesUake Village, CA 9 1 362 
Telephone: 805/230-1350 
Facsimile: 805/230-1355 
email: info@socalip.com 
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APPENDIX 

The claims involved in this Appeal are as foUows. 

59. A method of decrypting an electronic file that is to be opened in an application ^ogram 
nmning in a suitable environment for operating the program, comprising the steps of: 

a) issuing an open document command to act upon the file; 

b) intercepting the open documwit command; 

c) retrieving a decryption key value; 

d) dectypting the file using the decryption key value to create an unencrypted file; 

and 

e) completing the open document command by perforaiing the open document 
command upon the unencrypted file mstead of the file; and 

wherein steps c) and d) further comprise the steps of: 

selecting an algorithm to use with the file from one of a plurality of algorithms; 
inputting a decryption key with a key value; 

validating the deciyption key value with the key value associated with a file identifier; 
using the key value and the selected algorithm to decrypt the file; and 
running a virus scan program on the decrypted file. 
68. A method of encrypHng and decrypting a file with one of a plurality of algorithms. 

comprising the steps of: 

selecting an algorithm to use with the file from the plurality of algorithms; 
selecting an encryption key wifli a key value; 
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generating a file identifier from the encryption key, an algorithni identifier associated 
with the selected algorithm and a data identifier associated with the file; 
adding the file identifier to the file; 
inputting a decryption key with a decryption key value; 

validating the decryption key value with the key value associated with the file identifier, 

and 

using the key value and the selected algorithm to decrypt the file; 
wherein the file is located in a document or image repository, 

69. A method of encrypting and decrypting a file with one of a plurality of algorithms, 

comprising the steps of; 

selecting an algorithm to use with the file from the pluraUty of algorithms; 

selecting an encryption key with a key value; 

generating a file identifier from the encryption key, an algorithm identifier associated 
with the selected algorithm and a data identifier associated with the file; 

adding the file identifier to the file; 

using the key value and the selected algorithm to encrypt the file and generate an 

encrypted file; 

sending the encrypted file from a first person to a second person over the Internet in an e- 

mail message; 

inputting a decryption key with a decryption key value; 

validating the decryption keyvalue with thekey value associated with the fileiden^ 

and 

using the key value and the selected algorithm to decrypt the file. 
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70. nie method as recited in claim 69. wherein the first person is the same as the second person. 

71. A method of encrypting and decrypting a file with one of a plurality of algorithms, 

comprising the steps of: 

selecting an algorithm to use with the file fix>m the plurality of algorithms; 

selecting an encryption key with a key value; 

generating a file identifier ftom the encryption key. an algorithm identifier associated 
with the selected algorithm and a data identifier associated with ihe file; 
adding the file identifier to the file; 

using the key value and the selected algorithm to encrypt the file and generate an 

encrypted file; 

inputting a decryption key with a decryption key value; 

validating the decryption key value with the key value associated with the file identifier, 

and 

using the key value and the selected algorithm to decrypt the file; 

wherein a portion of the file identifier is encrypted before it is inserted into the file. 

72 . The method as recited in claim 7 1 . comprising the further step of decryption a portion of the 
file identifier before the decryption key value is validated. 

73. The method as recited in claim 72, wherein all of the file identifier is encrypted before the 
decryption key value is validated. 

75. A method of encrypting and decrypting a file with one of a plurality of algorithms, 

comprising the steps of: 

selecting an algorithm to use with the file ftom the plurality of algorithms; 
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selecting an encryption key with a key value; 

generating a file identifi^ from the encryption key, an algorithm identifier associated 
with the selected algorithm and a data identifier associated with the file; 
adding the file identifier to the file; 

running a virus scan program on the file before it is encrypted; 

using the key value and tiie selected algorithm to encrypt the file and generate an 

encrypted file; 

inputting a decryption key with a decryption key value; 

validating the decryption key value with the key value associated with the file identifier. 

and 

using the key value and the algorithm to decrypt tixe file; 

wherein a portion of the file identifier is encrypted before it is inserted into the file. 

76. A method of encrypting a file with one of a pluraUty of algorithms, comprising the steps of: 
selecting an algorithm to use with tiie file fix>m the plurality of algorithms; 
selecting an encryption key with a key value; 

genemting a file identifier from the encryption key, an algorithm identifier associated 
with the selected algoritiun and a data identifier associated with the file; 
adding the file identifier to the file; and 

uniquely identifying the encrypted file with an encrypted file header. 
78. A method of encrypting and decrypting a file with one of a plurality of algorithms, the 

metiiod comprising the steps of 

selecting an algorithm to use with the file from the plurality of algorithms 
selecting an encryption key with a key value 
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gen««ting a file identifier ftom the encryption key. an algorithm identifier associated 
with the selected algorithm and a data identifier associated with the file 
adding the file identifier to the file 

using the key value and the selected algorithm to encrypt the file and generate an 
encrypted file 

sentog Bie encrypted file ftom a first peBon to a second person in an e-maU m«.»ge. 
79, A method of encrypting and deaypting a file »i.h one of a plurality of algorithm,, 

method comprising the stq)S of: 

receiving an encrypted file from a first person by a second person in an e-mail message 

extracting a file identifier fipom the file 

inputting a decryption key with a decryption key value 

validating thedecryptionkey value withakey value associated with the fileidentifier 
using the key value and the selected algorithm to decrypt the file. 
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